/explore
|
You are here |
pentestlab.blog | ||
| | | | |
www.codeproject.com
A detailed analysis of how to inject the .NET runtime and arbitrary .NET assemblies into unmanaged and managed processes; and how to execute managed code within those processes. |
|
| | | | | ||
| | | | |
openpunk.com
Recently I faced a rather intimidating problem while working on a project. The problem was fairly simple from an objective point of view: "How do I load a DLL into a process on startup?" Now you might be wondering, "Why not just patch the IAT (import address table) on the executable and force it to load your payload DLL?" Yes! That was my exact thoughts too, however for reasons I'll explain it wasn't that simple. |
|
| | | | | ||
| | | | |
bohops.com
Introduction In recent years, there have been numerous published techniques for evading endpoint security solutions and sources such as A/V, EDR and logging facilities. The methods deployed to achieve the desired result usually differ in sophistication and implementation, however, effectiveness is usually the end goal (of course, with thoughtful consideration of potential tradeoffs). Defenders can... |
|
| | | | | ||
| | | | |
functionallyparanoid.com
Many of the long-time readers of this blog are going to probably have a panic attack when they read this article because they are going to be asking themselves the question, "Why in the heck does he want to install Active Directory in his life?" The reason, like so many answers to so many of |
|
| | | |||